gupnp: allows DNS rebinding which could result in tricking browser into triggering actions against local UPnP services

A flaw was found in gupnp. DNS rebinding can occur when a victim's browser is used by a remote web server to trigger actions against local UPnP services including data exfiltration, data tempering, and other exploits. The highest threat from this vulnerability is to data confidentiality and...

DEBIAN-CVE-2020-27661

A divide-by-zero issue was found in dwc2handlepacket in hw/usb/hcd-dwc2.c in the hcd-dwc2 USB host controller emulation of QEMU. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service...

The vulnerability of the Work Provider Site Level Administration component of the application for accessing, organizing, and interacting with various types of Oracle Universal Work Queue tasks allows a malicious actor to disclose protected information or gain access to the creation, modification, or deletion of data.

The vulnerability of the Work Provider Site Level Administration component of the application for accessing, organizing, and interacting with various types of Oracle Universal Work Queue tasks is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker...

USN-4970-1 gupnp vulnerability

It was discovered that GUPnP incorrectly filtered local requests. If a user were tricked into visiting a malicious website, a remote attacker could possibly use this issue to perform actions against local UPnP services such as obtaining or altering sensitive information...

kernel: malicious USB devices can lead to multiple out-of-bounds write

An out-of-bounds write flaw was found in the Linux kernel’s HID drivers. An attacker, able to plug in a malicious USB device, can crash the system or read and write to memory with an incorrect address...

openSUSE Security Update : opera (openSUSE-2021-712)

This update for opera fixes the following issues : Update to version 76.0.4017.94 - released on the stable branch Update to version 76.0.4017.88 - CHR-8404 Update chromium on desktop-stable-90-4017 to 90.0.4430.85 - DNA-92219 Add bookmark API supports to the front-end - DNA-92409 MAC Present now...

Memory Corruption Vulnerability in Lovecraft Universal Connections

Lovecraft Universal Link is a universal video and audio player from Lovecraft. A memory corruption vulnerability exists in Aqiyi Universal Media Player. An attacker can exploit the vulnerability to execute malicious code or crash the program...

Memory Corruption Vulnerability in Lovecraft Universal Link (CNVD-2021-40252)

Lovecraft Universal Link is a universal video and audio player from Lovecraft. A memory corruption vulnerability exists in Aqiyi Universal Media Player. An attacker can exploit the vulnerability to execute malicious code or crash the program...

Memory Corruption Vulnerability in Lovecraft Universal Link (CNVD-2021-40250)

Lovecraft Universal Link is a universal video and audio player from Lovecraft. A memory corruption vulnerability exists in Aqiyi Universal Media Player. An attacker can exploit the vulnerability to execute malicious code or crash the program...

Memory Corruption Vulnerability in Lovecraft Universal Link (CNVD-2021-40251)

Lovecraft Universal Link is a universal video and audio player from Lovecraft. A memory corruption vulnerability exists in Aqiyi Universal Media Player. An attacker can exploit the vulnerability to execute malicious code or crash the program...

Apple macOS 缓冲区错误漏洞

Apple macOS is a specialized operating system from Apple Inc. developed for Mac computers. A buffer error vulnerability exists in the model IO component of Apple MacOS, which stems from a boundary condition due to the model IO subsystem. A remote attacker can exploit this vulnerability to create ...

Apple macOS 缓冲区错误漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. Apple macOS suffers from a buffer error vulnerability that originates from a boundary error when processing untrusted input in Model I/O. A remote attacker could exploit the vulnerability could create a...

Apple macOS 缓冲区错误漏洞

Apple macOS is a suite of specialized operating systems developed by Apple Inc. for Mac computers. A buffer error vulnerability exists in the Model IO component of Apple MacOS, which stems from a boundary condition in the Model IO subsystem. A remote attacker can exploit the vulnerability to crea...

Apple macOS 缓冲区错误漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. macOS suffers from a buffer error vulnerability that stems from a boundary condition in the Model I/O subsystem. A remote attacker exploiting this vulnerability could create a specially crafted USD file, tric...

DEBIAN-CVE-2021-33516

An issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS rebinding. A remote web server can exploit this vulnerability to trick a victim's browser into triggering actions against local UPnP services implemented using this library. Depending on the affected...

PT-2021-18828 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.4 Security Update versions prior to 2021-003 Catalina Security Update versions prior to 2021-004 Mojave iOS versions prior to 14.6 iPadOS versions prior to 14.6 Description: An information disclosure issue was...

kernel: use-after-free caused by a malicious USB device in the drivers/usb/misc/adutux.c driver

A flaw was found in the Linux kernel’s implementation for ADU devices from Ontrak Control Systems, where an attacker with administrative privileges and access to a local account could pre-groom the memory and physically disconnect or unload a module. The attacker must be able to access either of...

kernel: use-after-free caused by a malicious USB device in the drivers/usb/misc/adutux.c driver

A flaw was found in the Linux kernel’s implementation for ADU devices from Ontrak Control Systems, where an attacker with administrative privileges and access to a local account could pre-groom the memory and physically disconnect or unload a module. The attacker must be able to access either of...

hostapd: UPnP SUBSCRIBE misbehavior in WPS AP

The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue...

CVE-2021-32471

Insufficient input validation in the Marvin Minsky 1967 implementation of the Universal Turing Machine allows program users to execute arbitrary code via crafted data. For example, a tape head may have an unexpected location after the processing of input composed of As and Bs instead of 0s and 1s...